{
  "Event": {
    "analysis": "1",
    "date": "2026-05-29",
    "extends_uuid": "",
    "info": "Maltrail IOC for 2026-05-30",
    "publish_timestamp": "1780178406",
    "published": true,
    "threat_level_id": "2",
    "timestamp": "1780178405",
    "uuid": "73a87b4e-9bc9-48c2-bf1d-bca9bc5827fc",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#d6f264",
        "local": false,
        "name": "MALWARE",
        "relationship_type": ""
      },
      {
        "colour": "#00833c",
        "local": false,
        "name": "misp:threat-level=\"medium-risk\"",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#0071c3",
        "local": false,
        "name": "osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      },
      {
        "colour": "#0064ac",
        "local": false,
        "name": "osint:source-type=\"manual-collection\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:03+00:00",
        "timestamp": "1780095603",
        "to_ids": false,
        "type": "url",
        "uuid": "1216f16f-9c5e-4023-8026-002d9ec13936",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/c43514eefbc716fbe3df188aea293983c11a1aca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:03+00:00",
        "timestamp": "1780095603",
        "to_ids": false,
        "type": "url",
        "uuid": "17eaaab1-116b-426b-8027-61a760ffe81a",
        "value": "https://x.com/skocherhan/status/2060432300375150977",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:03+00:00",
        "timestamp": "1780095603",
        "to_ids": true,
        "type": "domain",
        "uuid": "49878557-e92f-4897-b073-52dda927fe30",
        "value": "access.edoc.korea-app.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:03+00:00",
        "timestamp": "1780095604",
        "to_ids": true,
        "type": "domain",
        "uuid": "0788625e-fccb-4741-9bed-68d7af9dd7ef",
        "value": "coupang.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:04+00:00",
        "timestamp": "1780095604",
        "to_ids": true,
        "type": "domain",
        "uuid": "0da9f36f-719c-4528-bf7a-ce2f7480e4cc",
        "value": "cp10523.epost-kr.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:04+00:00",
        "timestamp": "1780095604",
        "to_ids": true,
        "type": "domain",
        "uuid": "c47bd40b-29bd-4256-925c-2e4e1ba3b779",
        "value": "dmf.ips-cert.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:04+00:00",
        "timestamp": "1780095604",
        "to_ids": true,
        "type": "domain",
        "uuid": "0599b7ea-f6df-42f2-b64b-8e3da0e80a6e",
        "value": "edoc.korea-app.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:04+00:00",
        "timestamp": "1780095604",
        "to_ids": true,
        "type": "domain",
        "uuid": "99042c6c-3e16-4667-bc75-334debf0069f",
        "value": "ips-nifty.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:04+00:00",
        "timestamp": "1780095605",
        "to_ids": true,
        "type": "domain",
        "uuid": "76505949-cb09-4529-86ab-f06ac1012872",
        "value": "jfzb.coupang.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:05+00:00",
        "timestamp": "1780095605",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c255579-e1fc-4b0d-b0e8-6fed9d9f0b9b",
        "value": "korea-app.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:05+00:00",
        "timestamp": "1780095605",
        "to_ids": true,
        "type": "domain",
        "uuid": "d371f7db-701c-4739-a0ec-68983a352740",
        "value": "kr-edoc.xubi.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:05+00:00",
        "timestamp": "1780095605",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf8d8b8e-aaaa-429c-b9f8-075c43139d1f",
        "value": "nid.kr-edoc.xubi.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:05+00:00",
        "timestamp": "1780095605",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6f9e200-4a58-47bd-8267-a0203948314a",
        "value": "view.ips-nifty.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:05+00:00",
        "timestamp": "1780095605",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8e7bf56-e82c-4ef6-aaaf-67d99ada9969",
        "value": "xpo.coupang.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:05+00:00",
        "timestamp": "1780095605",
        "to_ids": false,
        "type": "url",
        "uuid": "87db443e-ae32-4b0b-95f9-f5a960a92ea2",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/25aeb6cb02c74edfd7a115d8dbc4ac9432fe3f56",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:05+00:00",
        "timestamp": "1780095606",
        "to_ids": false,
        "type": "url",
        "uuid": "711bd6d0-3e2f-499f-a6e4-b0a9174aa437",
        "value": "https://x.com/smica83/status/2060341816415649951",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:06+00:00",
        "timestamp": "1780095606",
        "to_ids": false,
        "type": "url",
        "uuid": "65512b34-5055-49f0-a8da-30a70ba772a1",
        "value": "https://www.virustotal.com/gui/file/1df1a23a24dff84ba55dadcfa90cc3df7f7ace6dde69987d125c07474c8a1388/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:06+00:00",
        "timestamp": "1780095606",
        "to_ids": true,
        "type": "domain",
        "uuid": "2dfe6b9d-bd2f-4823-b876-daaf04b11659",
        "value": "bubblekip.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:06+00:00",
        "timestamp": "1780095606",
        "to_ids": true,
        "type": "domain",
        "uuid": "766d178d-8e6c-4782-8a81-3ab43325705c",
        "value": "docstorage-hub.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:06+00:00",
        "timestamp": "1780095606",
        "to_ids": true,
        "type": "domain",
        "uuid": "3dea30d9-e924-4c74-83a2-8e0667691d86",
        "value": "imagest-r.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:06+00:00",
        "timestamp": "1780095606",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a48a93c-80c0-4151-8fbf-1412ece11c6f",
        "value": "ninewerty.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:06+00:00",
        "timestamp": "1780095606",
        "to_ids": true,
        "type": "domain",
        "uuid": "69f8682d-8809-4d5b-9d45-3fc4e35691d1",
        "value": "photovault-safe.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:07+00:00",
        "timestamp": "1780095607",
        "to_ids": true,
        "type": "domain",
        "uuid": "6aaa4f97-1424-4e4f-97ce-74604923f66f",
        "value": "screenshot-jpg290526.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:07+00:00",
        "timestamp": "1780095607",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a883046-c3ac-44a8-a487-b01d826f05af",
        "value": "superlork.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:07+00:00",
        "timestamp": "1780095607",
        "to_ids": false,
        "type": "url",
        "uuid": "303762fd-82fc-47ee-b5ec-32d1d1d3eb4a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/f999f220a3621c54b60fde28eda54e567b09d7c7",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:07+00:00",
        "timestamp": "1780095607",
        "to_ids": false,
        "type": "url",
        "uuid": "20ebd393-8cf4-44de-ac38-1ac1403d111b",
        "value": "https://x.com/patialavii/status/2060416552948887895",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:07+00:00",
        "timestamp": "1780095607",
        "to_ids": true,
        "type": "domain",
        "uuid": "c40d6d48-523e-4534-b9a1-8c4c4beddaae",
        "value": "workspaceviewer.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-29T23:00:07+00:00",
        "timestamp": "1780095607",
        "to_ids": true,
        "type": "domain",
        "uuid": "81bca562-7b4f-43d9-a4d4-231acc1cdb27",
        "value": "pub-ab1bb580d3434929a2d068c06669ddb2.r2.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:03+00:00",
        "timestamp": "1780138804",
        "to_ids": false,
        "type": "url",
        "uuid": "276a9403-8ae8-48e5-8445-27578e93fff1",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/5a0ad2cbd9c39f5df9d6f338527211b5315d9178",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:04+00:00",
        "timestamp": "1780138804",
        "to_ids": true,
        "type": "domain",
        "uuid": "540d6576-8b20-46e8-8a96-0607e70a3472",
        "value": "urshort.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:04+00:00",
        "timestamp": "1780138804",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e9fd9fa-0a7c-465e-8dd6-11d61da633b4",
        "value": "ushort.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:04+00:00",
        "timestamp": "1780138804",
        "to_ids": false,
        "type": "url",
        "uuid": "80db487c-332b-4678-9d5c-0ad484a32eb9",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/fff6b5f2267badcd27204de4990879f5af7d44a8",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:04+00:00",
        "timestamp": "1780138804",
        "to_ids": false,
        "type": "url",
        "uuid": "3f4d3ef8-e8ed-4743-a3fa-51de71ad8d9b",
        "value": "https://x.com/riper81/status/2060164428876951828",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:04+00:00",
        "timestamp": "1780138805",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc804f05-5572-472e-b07a-fbb6292b5297",
        "value": "u-short.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:05+00:00",
        "timestamp": "1780138805",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c2a92bf-1bf1-449f-a110-36a4cbdb2f61",
        "value": "urshort.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:05+00:00",
        "timestamp": "1780138805",
        "to_ids": true,
        "type": "domain",
        "uuid": "43855936-063a-45e2-98d0-34c96830c58a",
        "value": "ushort.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:05+00:00",
        "timestamp": "1780138805",
        "to_ids": true,
        "type": "domain",
        "uuid": "81bffacd-b960-4034-a40c-d672f733ee0f",
        "value": "ushort.company",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:05+00:00",
        "timestamp": "1780138805",
        "to_ids": true,
        "type": "domain",
        "uuid": "602c8877-0e71-4657-be74-e9aa62b313f3",
        "value": "ushort.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:05+00:00",
        "timestamp": "1780138805",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d83c569-a624-454b-8bdc-fff9635588f6",
        "value": "ushort.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:05+00:00",
        "timestamp": "1780138805",
        "to_ids": true,
        "type": "domain",
        "uuid": "3153ef96-b9ec-4054-a9ff-20d874df3aea",
        "value": "ushort.observer",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:05+00:00",
        "timestamp": "1780138806",
        "to_ids": true,
        "type": "domain",
        "uuid": "99a3e122-061d-4b64-afa0-aa8d4a2ba774",
        "value": "ushort.today",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:06+00:00",
        "timestamp": "1780138806",
        "to_ids": false,
        "type": "url",
        "uuid": "641af988-7710-4afa-afae-85ff95fc96ce",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ee0c87073466124435c98907f5e7dfa47d44ce25",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:06+00:00",
        "timestamp": "1780138806",
        "to_ids": true,
        "type": "domain",
        "uuid": "afac6866-89b5-49d4-9812-67b564d51ef7",
        "value": "safe-photohub.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_donot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:06+00:00",
        "timestamp": "1780138806",
        "to_ids": false,
        "type": "url",
        "uuid": "519f4dbf-cf33-4306-8aef-d6b991fbd447",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b5344b183b54a8d541c3e118e34d4ebf3e6a7681",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_donot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:06+00:00",
        "timestamp": "1780138806",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1061f7e-53b3-4f47-b1c2-e00a5bc6b283",
        "value": "certific-activation.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_donot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:06+00:00",
        "timestamp": "1780138806",
        "to_ids": true,
        "type": "domain",
        "uuid": "8febacc9-5e01-4539-aa25-e6f09d431a03",
        "value": "nikkimstudiosllc.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_donot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:06+00:00",
        "timestamp": "1780138806",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0b3dd89-93ba-48ef-a6e4-3c6229fcb6f4",
        "value": "videoinnovationsdaily.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_donot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:06+00:00",
        "timestamp": "1780138807",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6e4917a-9789-4c40-85f7-7a28e148c1fd",
        "value": "ftp.videoinnovationsdaily.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_donot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:07+00:00",
        "timestamp": "1780138807",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7ef6cce-756f-4c9a-ba3b-8419393ab468",
        "value": "mail.videoinnovationsdaily.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_donot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:07+00:00",
        "timestamp": "1780138807",
        "to_ids": false,
        "type": "url",
        "uuid": "36b1259a-b4fe-4024-857d-5357d1c03d5f",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/92ab2c7f2c008371e2816a015aabb849153aeb1a",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_donot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:07+00:00",
        "timestamp": "1780138807",
        "to_ids": false,
        "type": "url",
        "uuid": "b0a1cce0-d394-48c6-97a0-4a56736f16f0",
        "value": "https://x.com/suyog41/status/2060337183874302019",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_donot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:07+00:00",
        "timestamp": "1780138807",
        "to_ids": false,
        "type": "url",
        "uuid": "10370217-ae55-4566-b563-05db8499b0d8",
        "value": "https://www.virustotal.com/gui/file/4e6add88feff408b96f01d15917540dbb3ee3819c37020c4e03708410026192e/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_donot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T11:00:07+00:00",
        "timestamp": "1780138807",
        "to_ids": true,
        "type": "domain",
        "uuid": "b36159e8-95af-4b8c-9c2b-7ee80a4a06c2",
        "value": "greezupdto.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:05+00:00",
        "timestamp": "1780142406",
        "to_ids": false,
        "type": "url",
        "uuid": "31147d55-9eca-4203-8ce9-e45b6b8227e4",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/edea7cb83d636906ec80417738afbea88c021da7",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:06+00:00",
        "timestamp": "1780142406",
        "to_ids": true,
        "type": "domain",
        "uuid": "985fbae2-5ae1-4c73-9d3d-59b885415005",
        "value": "cambioefectivo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:06+00:00",
        "timestamp": "1780142406",
        "to_ids": true,
        "type": "domain",
        "uuid": "35990fa5-a3ba-4648-9282-77139698bc22",
        "value": "dakindsoups.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:06+00:00",
        "timestamp": "1780142406",
        "to_ids": true,
        "type": "domain",
        "uuid": "af5896c2-a350-4f37-b0a1-41de912e8877",
        "value": "produkmesin.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:06+00:00",
        "timestamp": "1780142406",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea093a13-d83f-40b8-80a7-2b757c62d5a3",
        "value": "webiqonline.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:06+00:00",
        "timestamp": "1780142407",
        "to_ids": false,
        "type": "url",
        "uuid": "b2c471df-e116-4a60-b463-af547f0e1d05",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b5512e61b536691bd4552e9aed1ffb5b124facc3",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:07+00:00",
        "timestamp": "1780142407",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "16da8f4b-7433-46c4-9dda-048887403c94",
        "value": "82.39.109.211",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:07+00:00",
        "timestamp": "1780142407",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "9c8a4333-b26b-421f-8053-678eee44680c",
        "value": "82.39.109.218",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:07+00:00",
        "timestamp": "1780142407",
        "to_ids": false,
        "type": "url",
        "uuid": "1a925bc1-2b7e-4ca5-b9c3-be21d7b7cb2a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/7da21fa962bc5261b00632ba653f7f56bcfca2a1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:07+00:00",
        "timestamp": "1780142407",
        "to_ids": false,
        "type": "url",
        "uuid": "576412da-01d8-486b-9400-b1eb4d18545a",
        "value": "https://x.com/masaomi346/status/2060214313252720731",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:07+00:00",
        "timestamp": "1780142408",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f905a22-2c32-4d6f-bd9a-553b03f2a7b7",
        "value": "azmekl.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:08+00:00",
        "timestamp": "1780142408",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8fa46a8-8481-419c-ad1e-637330788aef",
        "value": "eubka.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:08+00:00",
        "timestamp": "1780142408",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ab974fe-9b24-462b-a9e0-18495e27ae9d",
        "value": "ikebro.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:08+00:00",
        "timestamp": "1780142408",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b8e90c8-540c-465f-9613-80b1260bda95",
        "value": "lrdiuk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:08+00:00",
        "timestamp": "1780142408",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3b5104f-d6bb-42a0-9750-43773adb4082",
        "value": "balbxl.eubka.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:08+00:00",
        "timestamp": "1780142408",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b60b7cd-7efb-4b86-9469-6cef05812334",
        "value": "download.ikebro.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:08+00:00",
        "timestamp": "1780142409",
        "to_ids": false,
        "type": "url",
        "uuid": "202b3338-4dce-442a-97df-8dd92976bb10",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/f3e9e256480253f9ae3125383f3db30a44846d48",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:09+00:00",
        "timestamp": "1780142409",
        "to_ids": false,
        "type": "url",
        "uuid": "cad0bc7e-7a75-4afd-987c-1f5353676ae4",
        "value": "https://www.virustotal.com/gui/ip-address/43.167.9.65/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:09+00:00",
        "timestamp": "1780142409",
        "to_ids": true,
        "type": "domain",
        "uuid": "0315458f-8a1b-4232-a115-d28a8022bab5",
        "value": "cpabruwxgagyzm.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:09+00:00",
        "timestamp": "1780142409",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a078ff6-1cee-431d-909b-2d34727fb222",
        "value": "gwulittlxr.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:09+00:00",
        "timestamp": "1780142409",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebe6370e-c3e7-4766-9d8c-9572b3bd8fda",
        "value": "leqpylccczpnd.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:09+00:00",
        "timestamp": "1780142409",
        "to_ids": true,
        "type": "domain",
        "uuid": "c06d6e79-7c70-467d-bd11-765ca5ea8ab6",
        "value": "ogpjgxobzlya.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:09+00:00",
        "timestamp": "1780142409",
        "to_ids": true,
        "type": "domain",
        "uuid": "7635eb47-afab-4a42-ab42-b922163c1fbe",
        "value": "ptksldvvizjsuk.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:09+00:00",
        "timestamp": "1780142410",
        "to_ids": true,
        "type": "domain",
        "uuid": "b64a7618-68c2-45d8-aeb2-cfbbcf5a8ea6",
        "value": "rfotdqmwkv.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:10+00:00",
        "timestamp": "1780142410",
        "to_ids": true,
        "type": "domain",
        "uuid": "07329f73-7fa4-4875-97d7-53b1efd6129d",
        "value": "tabqzjavjuo.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:10+00:00",
        "timestamp": "1780142410",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4f5eee1-79e6-4146-883a-de323fb1317e",
        "value": "zgqkdper.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:10+00:00",
        "timestamp": "1780142410",
        "to_ids": false,
        "type": "url",
        "uuid": "2ecf9291-9348-48d0-9df1-31d3eb99343a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/a26a72cc7961476ed6c3cbc66ae3d9843f046e91",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:10+00:00",
        "timestamp": "1780142410",
        "to_ids": false,
        "type": "url",
        "uuid": "3f999ec0-c052-411d-8e38-1d17e49a104e",
        "value": "https://x.com/masaomi346/status/2060204402192052732",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:10+00:00",
        "timestamp": "1780142410",
        "to_ids": false,
        "type": "url",
        "uuid": "e798834e-8caf-4391-9867-fc9d6d77296d",
        "value": "https://www.virustotal.com/gui/file/a2dfc9a0c1e5135fe5afa3594d5eb8c89a6018f74a72f0a3b9052f781c783291/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:10+00:00",
        "timestamp": "1780142411",
        "to_ids": false,
        "type": "url",
        "uuid": "27de4826-90e0-4c4e-a4f7-18be86790a7c",
        "value": "https://x.com/masaomi346/status/2060260420829749579",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:11+00:00",
        "timestamp": "1780142411",
        "to_ids": true,
        "type": "domain",
        "uuid": "e529f2cf-2551-4cde-a00c-4e09cf6f4e56",
        "value": "thenrpod.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_roamingmantis",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:11+00:00",
        "timestamp": "1780142411",
        "to_ids": true,
        "type": "domain",
        "uuid": "9cba6124-8386-4928-b854-d0e08c81b53b",
        "value": "bmqobgextpnfj.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:11+00:00",
        "timestamp": "1780142411",
        "to_ids": false,
        "type": "url",
        "uuid": "a47fe39c-3413-4d72-8b55-5267261e7430",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/f472080c9d038e2a247a36a847bfe4f944fa0538",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:11+00:00",
        "timestamp": "1780142411",
        "to_ids": false,
        "type": "url",
        "uuid": "2c2e1cf2-1cff-49f5-a057-80b6dcb45c8b",
        "value": "https://x.com/smica83/status/2060340513580986577",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:11+00:00",
        "timestamp": "1780142411",
        "to_ids": false,
        "type": "url",
        "uuid": "2893f5fa-8382-4602-ac3b-464afa3a982d",
        "value": "https://www.virustotal.com/gui/file/b3942ad05357c5cb8617f2c66dea219abfd3367ee2139f9d8dc6d40aaef914c2/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:11+00:00",
        "timestamp": "1780142411",
        "to_ids": false,
        "type": "url",
        "uuid": "9be6d891-9e7f-4abb-81e7-dd5e3648e852",
        "value": "https://www.virustotal.com/gui/file/cf356be76e96233224e73e9d4d5fa8fa7ae178d8f56e5fd6c98d551ea2b06d86/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:11+00:00",
        "timestamp": "1780142412",
        "to_ids": true,
        "type": "domain",
        "uuid": "b50772fb-3ff5-4f4c-831c-8df2de9029d4",
        "value": "simpletskmn.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "purelogs",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:12+00:00",
        "timestamp": "1780142412",
        "to_ids": false,
        "type": "url",
        "uuid": "dbce1e82-fa27-45a8-a0a2-64058162608a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/c19e525c18ccdf3d852da295d51508a06f747503",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "purelogs",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:12+00:00",
        "timestamp": "1780142412",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4f3a84e-df81-48be-b8bf-8c0874ac00fe",
        "value": "hatop.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "purelogs",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:12+00:00",
        "timestamp": "1780142412",
        "to_ids": true,
        "type": "domain",
        "uuid": "8869654e-e776-4120-8276-ae039b4dc7d2",
        "value": "nationsbeta.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "purelogs",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:12+00:00",
        "timestamp": "1780142412",
        "to_ids": true,
        "type": "domain",
        "uuid": "95b50a37-273c-42aa-a4dd-4b7efbb72942",
        "value": "nationsbeta.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "purelogs",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:12+00:00",
        "timestamp": "1780142412",
        "to_ids": true,
        "type": "domain",
        "uuid": "44bc24e3-f980-4204-83d2-edf9bf7cc043",
        "value": "donate.nationsbeta.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "purelogs",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:12+00:00",
        "timestamp": "1780142413",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ca0489f-51ed-460a-ba0f-a0ff512d3449",
        "value": "map.nationsbeta.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:13+00:00",
        "timestamp": "1780142413",
        "to_ids": false,
        "type": "url",
        "uuid": "9d681d77-9983-4ded-a166-3497f08f6262",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/1ba71ab4f7ee1850b600600b7167e08f77b97a53",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "purelogs",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:13+00:00",
        "timestamp": "1780142413",
        "to_ids": false,
        "type": "url",
        "uuid": "f77cd02e-a786-44ad-8606-1b5b4a056015",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/025e08b109abbc874c539ddb24b5a531581bc100",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "purelogs",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:13+00:00",
        "timestamp": "1780142413",
        "to_ids": false,
        "type": "url",
        "uuid": "796a376b-ffb6-4226-858c-5804b245af53",
        "value": "https://x.com/smica83/status/2060346327075082360",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "purelogs",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:13+00:00",
        "timestamp": "1780142413",
        "to_ids": false,
        "type": "url",
        "uuid": "c08ae1a1-a688-432c-97b8-31a5ba403dfd",
        "value": "https://tria.ge/260529-p94eqsb17w/behavioral1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "purelogs",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:13+00:00",
        "timestamp": "1780142413",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "45d0a2f7-304f-453e-94b5-70327e75e891",
        "value": "2.27.59.167",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "purelogs",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T12:00:14+00:00",
        "timestamp": "1780142414",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ebfc73b-f9e4-42a8-8c62-ff72921e22af",
        "value": "hexfiles.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T13:00:03+00:00",
        "timestamp": "1780146003",
        "to_ids": false,
        "type": "url",
        "uuid": "9bfdaca7-422d-40ee-81c9-18df0c01e462",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/1b6daf1604e294638809339f1252ae13d26cc802",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T13:00:03+00:00",
        "timestamp": "1780146004",
        "to_ids": true,
        "type": "domain",
        "uuid": "6291feab-91e5-4f30-85a9-6e65a2fe6e5c",
        "value": "issueall.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T13:00:04+00:00",
        "timestamp": "1780146004",
        "to_ids": false,
        "type": "url",
        "uuid": "a80dd42e-c95b-41c8-9bd6-7e502e2d3487",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/43a7229ae68185b0c78dcef0ebd2dde7c51fbc53",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T13:00:04+00:00",
        "timestamp": "1780146004",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d8666d6-47be-42f8-9bce-290d6f9ab5dd",
        "value": "checker-pumps.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T13:00:04+00:00",
        "timestamp": "1780146004",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f984cc8-1f6c-49d5-8aa6-82632154e379",
        "value": "liiincidin.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T13:00:04+00:00",
        "timestamp": "1780146004",
        "to_ids": true,
        "type": "domain",
        "uuid": "c85f127e-92aa-48f9-9225-a528b89603b3",
        "value": "liikydin.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T13:00:04+00:00",
        "timestamp": "1780146004",
        "to_ids": true,
        "type": "domain",
        "uuid": "e28182f5-86eb-4903-b5bd-64118f081082",
        "value": "liinkydeen.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T13:00:04+00:00",
        "timestamp": "1780146004",
        "to_ids": true,
        "type": "domain",
        "uuid": "7444bd4b-87d5-4518-9573-35f173757a36",
        "value": "lincidin.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T13:00:05+00:00",
        "timestamp": "1780146005",
        "to_ids": true,
        "type": "domain",
        "uuid": "302e002b-d400-4b29-a0d7-f0023f0ee9f4",
        "value": "linkideen.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T13:00:05+00:00",
        "timestamp": "1780146005",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee0e65c3-70f7-4f58-babf-cc0304401556",
        "value": "linkiydiin.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T13:00:05+00:00",
        "timestamp": "1780146005",
        "to_ids": true,
        "type": "domain",
        "uuid": "71d76657-274e-45a4-9935-2326de3719e1",
        "value": "liyckidin.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "connectwise",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T13:00:05+00:00",
        "timestamp": "1780146005",
        "to_ids": false,
        "type": "url",
        "uuid": "876195cd-011d-4b10-b285-1d4ac7ffa591",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/a9500fb0dff1cfe6a781bcca4c21d8cdc149f103",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "connectwise",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T13:00:05+00:00",
        "timestamp": "1780146005",
        "to_ids": false,
        "type": "url",
        "uuid": "0604a4d7-6d95-45df-9439-15171f5c79fb",
        "value": "https://www.virustotal.com/gui/file/d6ad8571c92c9d095df41cb830943d5bf3eb0d88c37ce27fa54a16816249467d/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "connectwise",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T13:00:05+00:00",
        "timestamp": "1780146005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "1e28e930-0a7b-472d-b992-0909205ba526",
        "value": "108.62.161.53",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_joker",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T14:00:03+00:00",
        "timestamp": "1780149603",
        "to_ids": false,
        "type": "url",
        "uuid": "3367e9b1-dd2d-4123-baea-ef3b3d64d911",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/59847f16a542e886a582ad52a0bd67fe63ed1eec",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_joker",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T14:00:03+00:00",
        "timestamp": "1780149604",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2452a96-9bdf-46db-ad84-2dbf3d3d08b3",
        "value": "cachwe.help",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "valleyrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T14:00:04+00:00",
        "timestamp": "1780149604",
        "to_ids": false,
        "type": "url",
        "uuid": "0650fd44-b60f-44ae-a32a-a67dab8bef0b",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ab265a76c6e1a1b5f350ae956b123ea75a8c190a",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "valleyrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T14:00:04+00:00",
        "timestamp": "1780149604",
        "to_ids": false,
        "type": "url",
        "uuid": "3c9b5f25-dc91-4e03-b6d1-ffa0951d4297",
        "value": "https://www.virustotal.com/gui/file/11c3c7fd8b9fbb954a5a21af80f38414795930d63e8c6f5ea67bc92162359c52/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "valleyrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T14:00:04+00:00",
        "timestamp": "1780149604",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "2515e343-dfe8-483d-8a00-fedd46fde5e0",
        "value": "161.248.14.93",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_unc2465",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T15:00:02+00:00",
        "timestamp": "1780153202",
        "to_ids": false,
        "type": "url",
        "uuid": "37693ccb-1338-4662-86e8-600b4c1b077f",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ff20aee7adbb557e9ef81240beab02f4ab2e9b54",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_unc2465",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T15:00:02+00:00",
        "timestamp": "1780153202",
        "to_ids": true,
        "type": "domain",
        "uuid": "0178569d-d5ff-4753-b86b-3669e9f03120",
        "value": "auroraagencies.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_unc2465",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T15:00:02+00:00",
        "timestamp": "1780153202",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2cb4d61-f1f1-482d-8729-9bc1ced5035a",
        "value": "fenceidaho.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_unc2465",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T15:00:03+00:00",
        "timestamp": "1780153203",
        "to_ids": true,
        "type": "domain",
        "uuid": "d023f9b7-5455-4b29-94f2-1f087396b162",
        "value": "indianatowingservice.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_unc2465",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T15:00:03+00:00",
        "timestamp": "1780153203",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb34ab60-8133-4cc9-867d-4659dcefb378",
        "value": "jpmdswap.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_unc2465",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T15:00:03+00:00",
        "timestamp": "1780153203",
        "to_ids": true,
        "type": "domain",
        "uuid": "da16aa9e-dc52-4052-b4e7-65ccaceaa3d2",
        "value": "michigansecurityguard.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_unc2465",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T15:00:03+00:00",
        "timestamp": "1780153203",
        "to_ids": true,
        "type": "domain",
        "uuid": "a03492be-58fa-433d-b19d-2f6c165c8114",
        "value": "moltsavvy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_unc2465",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T15:00:03+00:00",
        "timestamp": "1780153203",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c7a9650-1c52-470e-9b42-2877ee1a4fed",
        "value": "moverssocal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_unc2465",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T15:00:03+00:00",
        "timestamp": "1780153204",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c04cf0c-e2a0-4cda-9516-0f181d0b2173",
        "value": "sandboxfinancialpartners.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_unc2465",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T15:00:04+00:00",
        "timestamp": "1780153204",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1b36e5c-b2ab-4a34-8586-d68352237a9e",
        "value": "travelfountain.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:03+00:00",
        "timestamp": "1780156804",
        "to_ids": false,
        "type": "url",
        "uuid": "cdb11496-5105-44a8-8348-3685a16a3118",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/053822aa22ef6b81bb083e2f1573dd0efb2016e3",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:04+00:00",
        "timestamp": "1780156804",
        "to_ids": true,
        "type": "domain",
        "uuid": "aaf5b84f-e0e2-4e5e-96db-f9bf66250ae7",
        "value": "cdn.bnantr.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:04+00:00",
        "timestamp": "1780156805",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d441179-5537-4855-a19e-5f57a21b909d",
        "value": "cdn.zeggah.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:05+00:00",
        "timestamp": "1780156805",
        "to_ids": true,
        "type": "domain",
        "uuid": "26e370cc-2172-4fc8-b4d3-f1c70734f351",
        "value": "dfeagr.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:05+00:00",
        "timestamp": "1780156805",
        "to_ids": true,
        "type": "domain",
        "uuid": "33ebe752-b581-409b-b558-14b4e12c0f49",
        "value": "ifavbett.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:05+00:00",
        "timestamp": "1780156806",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2c27257-5748-40dd-897b-19a63d109694",
        "value": "iuhnme.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:06+00:00",
        "timestamp": "1780156806",
        "to_ids": true,
        "type": "domain",
        "uuid": "d027d5b2-4e60-4318-8d21-192c60cb4e6e",
        "value": "oippake.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:06+00:00",
        "timestamp": "1780156806",
        "to_ids": true,
        "type": "domain",
        "uuid": "7665da6e-e53b-43b8-a2cd-3c646b7532e5",
        "value": "ooklale.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:06+00:00",
        "timestamp": "1780156806",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0589886-3f44-4fbc-b500-3cb2dd7aab7b",
        "value": "tyabner.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:06+00:00",
        "timestamp": "1780156806",
        "to_ids": true,
        "type": "domain",
        "uuid": "b52798d6-6081-4f65-963c-34690cd394f0",
        "value": "uiabne.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:06+00:00",
        "timestamp": "1780156806",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ac3a2d4-1e2e-48e6-8968-d950ed17c441",
        "value": "yttban.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:06+00:00",
        "timestamp": "1780156806",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec2284c1-a078-473b-8004-85c465e3b80c",
        "value": "zeggah.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:06+00:00",
        "timestamp": "1780156807",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5019c71-5b28-4eb4-8da0-5e05641761a2",
        "value": "zzanme.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:07+00:00",
        "timestamp": "1780156807",
        "to_ids": false,
        "type": "url",
        "uuid": "43cfdef6-b9a3-4827-923a-2116b542bbd1",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/3faef4f3265d754b32c5aa34c6fc7fdab7297662",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:07+00:00",
        "timestamp": "1780156807",
        "to_ids": true,
        "type": "domain",
        "uuid": "4bcf5d14-1ac0-465c-acc4-5b46b9d5d509",
        "value": "1hvl4j.2towig8bijd.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:07+00:00",
        "timestamp": "1780156807",
        "to_ids": true,
        "type": "domain",
        "uuid": "b48b14f7-80ff-409c-a6bc-f8bcd789ab2e",
        "value": "2923bx1jf4r.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:07+00:00",
        "timestamp": "1780156807",
        "to_ids": true,
        "type": "domain",
        "uuid": "bdb2a336-b810-4235-a7bc-5ec51afd3d52",
        "value": "2towig8bijd.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:07+00:00",
        "timestamp": "1780156807",
        "to_ids": true,
        "type": "domain",
        "uuid": "823e519d-d81f-4bb2-a0d2-4081f7c6db9e",
        "value": "3pc3b9ph4f7.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:07+00:00",
        "timestamp": "1780156808",
        "to_ids": true,
        "type": "domain",
        "uuid": "62223937-7429-4aa5-808e-939fd743a188",
        "value": "4brti.g3odkh1zx2q.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:08+00:00",
        "timestamp": "1780156808",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4d29a15-3144-42eb-a761-8e833e7f09f0",
        "value": "4btb8lukrf.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:08+00:00",
        "timestamp": "1780156808",
        "to_ids": true,
        "type": "domain",
        "uuid": "76bb2fab-ed38-4ea2-930c-d8f8ead9dddb",
        "value": "5v9h4rkbop.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:08+00:00",
        "timestamp": "1780156808",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc51560f-771e-4e6d-a291-3c5e1c2dcbfd",
        "value": "6c874.kvp207shd6.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:08+00:00",
        "timestamp": "1780156808",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a87a9e7-663f-486b-92cd-3710cb009391",
        "value": "772g.vsjlpbrey1d.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:08+00:00",
        "timestamp": "1780156808",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1896117-7174-474d-863c-ed4b0b02d822",
        "value": "8lxzbzbtoh.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:08+00:00",
        "timestamp": "1780156808",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f09c234-5de6-4c97-96ee-f94513b23316",
        "value": "8tvklxdp9e.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:09+00:00",
        "timestamp": "1780156809",
        "to_ids": true,
        "type": "domain",
        "uuid": "32cd74a0-b30f-4ca8-a0a2-74cb260ee0c5",
        "value": "9hear9ofp5.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:09+00:00",
        "timestamp": "1780156809",
        "to_ids": true,
        "type": "domain",
        "uuid": "b14db853-2e98-45ba-addf-49218e09b5b1",
        "value": "asdf.4brti.g3odkh1zx2q.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:09+00:00",
        "timestamp": "1780156809",
        "to_ids": true,
        "type": "domain",
        "uuid": "89de524b-cf28-46b2-bab2-60b89673e400",
        "value": "asdf.cyf550.g3odkh1zx2q.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:09+00:00",
        "timestamp": "1780156809",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b5ee8fb-4733-4158-99d7-e81ced46eb91",
        "value": "billing-address.abrdns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:09+00:00",
        "timestamp": "1780156809",
        "to_ids": true,
        "type": "domain",
        "uuid": "d59cdc1a-d1a0-4bab-a55f-18417ff66352",
        "value": "cloudvps.ddnsguru.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:09+00:00",
        "timestamp": "1780156809",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7fa2ad7-b15e-484c-89cc-7694e21ae78f",
        "value": "cyf550.g3odkh1zx2q.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:09+00:00",
        "timestamp": "1780156810",
        "to_ids": true,
        "type": "domain",
        "uuid": "6904631d-8db7-42db-88d9-f385641ee6ad",
        "value": "doc-load.ln2jl.xp2xbk8ukme.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:10+00:00",
        "timestamp": "1780156810",
        "to_ids": true,
        "type": "domain",
        "uuid": "50c52e08-4200-4e36-a0d9-47ca079e5cd4",
        "value": "docnid.vuczu.xp2xbk8ukme.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:10+00:00",
        "timestamp": "1780156810",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ea1d181-0ed8-4dd9-808b-d9bc022b97e3",
        "value": "eb0bw7j0sr.v6.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:10+00:00",
        "timestamp": "1780156810",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6a2726d-dbb0-4ed2-982e-d2956d7dbdbf",
        "value": "fklihnz6pb.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:10+00:00",
        "timestamp": "1780156810",
        "to_ids": true,
        "type": "domain",
        "uuid": "7597be30-3cac-4092-8026-634c7a86974a",
        "value": "g3odkh1zx2q.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:10+00:00",
        "timestamp": "1780156810",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce310512-d0a3-47c5-b252-79d2db03dd95",
        "value": "g4gr.eb0bw7j0sr.v6.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:10+00:00",
        "timestamp": "1780156811",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8982c27-a613-45d8-9d49-e8a764bac442",
        "value": "gm2gx.8lxzbzbtoh.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:11+00:00",
        "timestamp": "1780156811",
        "to_ids": true,
        "type": "domain",
        "uuid": "77d2588e-0a81-49c1-896a-5edf6fcfd45c",
        "value": "hh4323bc6mc.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:11+00:00",
        "timestamp": "1780156811",
        "to_ids": true,
        "type": "domain",
        "uuid": "c469b40d-8fe9-407e-baf3-45fd25b8a33b",
        "value": "hhois.o-r.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:11+00:00",
        "timestamp": "1780156811",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3a57165-1d2c-4ffc-8975-a912097fff2a",
        "value": "hostnid.ezgateway.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:11+00:00",
        "timestamp": "1780156811",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4e1fdb8-981b-49ec-80e7-de07a4ad99b5",
        "value": "hu4e60f2ok.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:11+00:00",
        "timestamp": "1780156811",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd68cc9e-eb70-4a0c-8502-ab69adb02ef8",
        "value": "ips-auth-nid.redirect.ydns.eu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:11+00:00",
        "timestamp": "1780156812",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7a362cb-397a-4382-91c1-80799cf18ed4",
        "value": "isdp.ooguy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:12+00:00",
        "timestamp": "1780156812",
        "to_ids": true,
        "type": "domain",
        "uuid": "61c8bcb3-7f52-48b4-a7a7-1338aff92dea",
        "value": "iyyfk3jnqbw.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:12+00:00",
        "timestamp": "1780156812",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5437bdf-0e82-4287-9c59-c2e995a558c8",
        "value": "juqc7swtyb.v6.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:12+00:00",
        "timestamp": "1780156812",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4be9e5c-5990-48e7-8e93-b5b908e1b004",
        "value": "kvp207shd6.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:12+00:00",
        "timestamp": "1780156812",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc77e35c-ff8b-456f-ab26-2b5cb3269839",
        "value": "li3pg2l17b.v6.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:12+00:00",
        "timestamp": "1780156812",
        "to_ids": true,
        "type": "domain",
        "uuid": "4577019e-a06e-490e-aa7f-6eed6a51617a",
        "value": "ln2jl.xp2xbk8ukme.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:12+00:00",
        "timestamp": "1780156813",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf7d9b69-4b67-4f52-bd73-e72e2543aa82",
        "value": "mois-auth-nid.gm2gx.8lxzbzbtoh.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:13+00:00",
        "timestamp": "1780156813",
        "to_ids": true,
        "type": "domain",
        "uuid": "194875f1-8c30-44bd-b079-b4f13bffa7f1",
        "value": "moisguide.g4gr.eb0bw7j0sr.v6.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:13+00:00",
        "timestamp": "1780156813",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c034749-ca70-4662-8e6c-9501c80d3f9c",
        "value": "n-aver-log.camdvr.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:13+00:00",
        "timestamp": "1780156813",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f8261e4-fceb-4070-8562-2a0bd4ab398a",
        "value": "naver-login.petfoodkorea.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:13+00:00",
        "timestamp": "1780156813",
        "to_ids": true,
        "type": "domain",
        "uuid": "317f7cd9-e104-45ed-8358-25915ac0f74a",
        "value": "nclouddocs.bumbleshrimp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:13+00:00",
        "timestamp": "1780156813",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e329159-4bd8-41bb-b4ac-cc551585436f",
        "value": "ndoc.1hvl4j.2towig8bijd.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:13+00:00",
        "timestamp": "1780156813",
        "to_ids": true,
        "type": "domain",
        "uuid": "319dbf94-3409-4792-819a-eaa485fd844b",
        "value": "ndoc.hhois.o-r.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:13+00:00",
        "timestamp": "1780156814",
        "to_ids": true,
        "type": "domain",
        "uuid": "18f677ab-6613-4ed4-a48d-00114bc0e2fc",
        "value": "ndoc.hostnid.ezgateway.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:14+00:00",
        "timestamp": "1780156814",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2ed20d0-3d34-4525-815f-c1baa69f4301",
        "value": "ndocload.cloudvps.ddnsguru.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:14+00:00",
        "timestamp": "1780156814",
        "to_ids": true,
        "type": "domain",
        "uuid": "8adb800a-ad30-4532-a36f-ec1e7a303c64",
        "value": "nhncontents.cafe",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:14+00:00",
        "timestamp": "1780156814",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e29c37f-8bea-4b5b-a162-0f7aaa6088b8",
        "value": "nid.niddirect.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:14+00:00",
        "timestamp": "1780156814",
        "to_ids": true,
        "type": "domain",
        "uuid": "484efc1b-d825-46d7-aae7-29277bb953c4",
        "value": "nid.nusser.ezgateway.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:14+00:00",
        "timestamp": "1780156814",
        "to_ids": true,
        "type": "domain",
        "uuid": "13128f45-072e-4a80-bc23-844cbdefaa05",
        "value": "niddirect.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:14+00:00",
        "timestamp": "1780156814",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf121bdb-5028-4f7a-b00d-f6889907d9b4",
        "value": "nidsign.772g.vsjlpbrey1d.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:15+00:00",
        "timestamp": "1780156815",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb63df36-221c-4a17-9dd6-05dbe0e7b091",
        "value": "ninvoice.nclouddocs.bumbleshrimp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:15+00:00",
        "timestamp": "1780156815",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3a5886d-9379-4dd5-b7d4-ffd397026d99",
        "value": "ninvoice.nmlist.p-e.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:15+00:00",
        "timestamp": "1780156815",
        "to_ids": true,
        "type": "domain",
        "uuid": "03b6ccd4-8bf9-47fb-b2d5-b464dc6e436e",
        "value": "ninvoice.nmosinvoice.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:15+00:00",
        "timestamp": "1780156815",
        "to_ids": true,
        "type": "domain",
        "uuid": "02968c42-f68a-4043-86f1-1189c6ef294e",
        "value": "nisoft.yyuyy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:15+00:00",
        "timestamp": "1780156815",
        "to_ids": true,
        "type": "domain",
        "uuid": "294449a4-a2c3-41a9-9b3d-eaaf4c7c1098",
        "value": "nmlist.p-e.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:15+00:00",
        "timestamp": "1780156815",
        "to_ids": true,
        "type": "domain",
        "uuid": "73045287-1e1c-4c20-80a4-3eeaf51f94b7",
        "value": "nmosinvoice.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:15+00:00",
        "timestamp": "1780156816",
        "to_ids": true,
        "type": "domain",
        "uuid": "424e6162-75b5-4353-9d68-78a9ac8713e9",
        "value": "npo-doc.workspace.cloud-ip.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:16+00:00",
        "timestamp": "1780156816",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea29ce48-4336-4ee3-ba29-031cc1fdc73d",
        "value": "nrg644np82.v6.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:16+00:00",
        "timestamp": "1780156816",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f5d4358-4fb1-4164-a59b-316e18c53fca",
        "value": "ntverify.nisoft.yyuyy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:16+00:00",
        "timestamp": "1780156816",
        "to_ids": true,
        "type": "domain",
        "uuid": "36481194-2c60-4e13-bd46-441aa76bccd7",
        "value": "nusser.ezgateway.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:16+00:00",
        "timestamp": "1780156816",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab60ad5c-2b1c-4013-8a01-06b11cae8027",
        "value": "ofwajrd6pr.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:16+00:00",
        "timestamp": "1780156816",
        "to_ids": true,
        "type": "domain",
        "uuid": "08a5a83c-ffd9-4a89-88ea-f1037732c1e0",
        "value": "redirect.ydns.eu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:16+00:00",
        "timestamp": "1780156817",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0dcfbd3-eeb3-40fb-b622-b47587a2a098",
        "value": "rfjx07u0x3.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:17+00:00",
        "timestamp": "1780156817",
        "to_ids": true,
        "type": "domain",
        "uuid": "1786fcff-1691-4b1c-a556-744a1a2eabf1",
        "value": "s8arkan4ja.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:17+00:00",
        "timestamp": "1780156817",
        "to_ids": true,
        "type": "domain",
        "uuid": "673669c1-efda-4e47-9e5d-53b25860d3ed",
        "value": "service-nid.6c874.kvp207shd6.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:17+00:00",
        "timestamp": "1780156817",
        "to_ids": true,
        "type": "domain",
        "uuid": "777bb511-4f0d-4fb9-aa25-c779c1e84e89",
        "value": "tinvoice.opik.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:17+00:00",
        "timestamp": "1780156817",
        "to_ids": true,
        "type": "domain",
        "uuid": "8cd9bfd8-56e3-488a-bfe1-94cdc36e9aef",
        "value": "ug72r637rqr.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:17+00:00",
        "timestamp": "1780156817",
        "to_ids": true,
        "type": "domain",
        "uuid": "e66f8b57-e3b6-47b5-8242-a667ee2305a5",
        "value": "uui90svmzk.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:17+00:00",
        "timestamp": "1780156817",
        "to_ids": true,
        "type": "domain",
        "uuid": "468cc1d9-0155-49b6-bc6e-5ef1f5bc8e67",
        "value": "v32l8g4nbc3.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:17+00:00",
        "timestamp": "1780156818",
        "to_ids": true,
        "type": "domain",
        "uuid": "42f29a70-ca03-48d9-a5b0-382953a2e78c",
        "value": "verify-nid.suredoc.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:18+00:00",
        "timestamp": "1780156818",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0ad56d8-3fd0-4493-8f63-cffc7d842d6a",
        "value": "vsjlpbrey1d.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:18+00:00",
        "timestamp": "1780156818",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca6f26ae-871b-4c78-935b-55474ca50a02",
        "value": "vuczu.xp2xbk8ukme.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:18+00:00",
        "timestamp": "1780156818",
        "to_ids": true,
        "type": "domain",
        "uuid": "a941c769-ed6d-4be3-b653-476ec22dffdc",
        "value": "vyvipbnt5p0.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:18+00:00",
        "timestamp": "1780156818",
        "to_ids": true,
        "type": "domain",
        "uuid": "58764dce-b88b-4505-a11a-81f4c1a137c1",
        "value": "whois.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:18+00:00",
        "timestamp": "1780156818",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f257417-1e2f-4fd1-9d81-fbe97777f3d1",
        "value": "workspace.cloud-ip.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:18+00:00",
        "timestamp": "1780156819",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ad30a36-2387-4b5f-8065-c86d70762a89",
        "value": "wv05i1q670.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:19+00:00",
        "timestamp": "1780156819",
        "to_ids": true,
        "type": "domain",
        "uuid": "966b65b2-15b1-4e68-a770-d2a7f3d99dc5",
        "value": "x5ffq2z8h8.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:19+00:00",
        "timestamp": "1780156819",
        "to_ids": true,
        "type": "domain",
        "uuid": "aae033cd-a761-4289-adc0-f0f13c2a43f4",
        "value": "xi99w080ra.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:19+00:00",
        "timestamp": "1780156819",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4927e44-623b-4154-9489-9cd3c0b41734",
        "value": "xp2xbk8ukme.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:19+00:00",
        "timestamp": "1780156819",
        "to_ids": true,
        "type": "domain",
        "uuid": "74ee410f-370f-4a72-ad52-d622e03ad4b4",
        "value": "y8fb9ktbd7f.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T16:00:19+00:00",
        "timestamp": "1780156819",
        "to_ids": true,
        "type": "domain",
        "uuid": "537f5703-901e-40c6-a815-5dfaa09b06a4",
        "value": "zsg8de2qpw0.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T17:00:02+00:00",
        "timestamp": "1780160402",
        "to_ids": false,
        "type": "url",
        "uuid": "45d4a2e9-2c57-4c7d-997c-f102460f5b10",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/51c267c9cf2314b7f2d27d9acd4b9d628886bd07",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T17:00:02+00:00",
        "timestamp": "1780160403",
        "to_ids": true,
        "type": "domain",
        "uuid": "19a43eff-45e6-46fe-b89e-dde5c1472c89",
        "value": "goawq.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T17:00:03+00:00",
        "timestamp": "1780160403",
        "to_ids": true,
        "type": "domain",
        "uuid": "90cea6c2-a79a-4259-bad4-cab3ccef9617",
        "value": "hydrantmachine.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "0ktapus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T18:00:03+00:00",
        "timestamp": "1780164003",
        "to_ids": false,
        "type": "url",
        "uuid": "4d5d883d-c1da-446a-a285-af427180111a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/aae264e861f619ea1619b8fcc888f7fbaebb4e28",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "0ktapus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T18:00:04+00:00",
        "timestamp": "1780164004",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d72990d-9914-40c9-9243-0db85c359a8c",
        "value": "vr7qlm8n5.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "0ktapus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T18:00:04+00:00",
        "timestamp": "1780164004",
        "to_ids": false,
        "type": "url",
        "uuid": "7cc25875-6628-4e66-9f81-5d99a935b3c3",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/11665a3e11d98575f318c9e98b7b7c0581b6e764",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "0ktapus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T18:00:04+00:00",
        "timestamp": "1780164004",
        "to_ids": true,
        "type": "domain",
        "uuid": "090fd0af-7846-472f-a2f1-0865bda55206",
        "value": "asfafs.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "0ktapus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T18:00:04+00:00",
        "timestamp": "1780164005",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c4a34c0-202e-4f9b-981c-938106043735",
        "value": "vines.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T18:00:05+00:00",
        "timestamp": "1780164005",
        "to_ids": false,
        "type": "url",
        "uuid": "56e6fe38-c2e7-43d6-9fe7-9465137ec72d",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/58237b65b3a90561208c22432c936ab4c9dd40f8",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T18:00:05+00:00",
        "timestamp": "1780164005",
        "to_ids": true,
        "type": "domain",
        "uuid": "d798f99d-09b3-450c-87c6-b3a381117fb7",
        "value": "logsasset.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T18:00:05+00:00",
        "timestamp": "1780164005",
        "to_ids": false,
        "type": "url",
        "uuid": "79ae99ea-4997-4045-ad06-27f9db21aba1",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/acd9e70939035d72baeb5717f692f74b7634898d",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T18:00:05+00:00",
        "timestamp": "1780164005",
        "to_ids": false,
        "type": "url",
        "uuid": "dbf7f0f6-2d82-45af-9dd7-98a4f1a868f6",
        "value": "https://x.com/patialavii/status/2060028203062939715",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T18:00:05+00:00",
        "timestamp": "1780164005",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b0473d6-c34d-45e4-a2db-a17a2c3897fe",
        "value": "c-nous.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T18:00:05+00:00",
        "timestamp": "1780164006",
        "to_ids": true,
        "type": "domain",
        "uuid": "6068a94d-a371-420d-9115-7a62e82ebc3c",
        "value": "s-25nwagey.s3.us-east-2.amazonaws.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T19:00:03+00:00",
        "timestamp": "1780167603",
        "to_ids": false,
        "type": "url",
        "uuid": "6bb87e13-6565-4be8-8f7c-e68cc6ab99d4",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/5d2caac85870dd15e3d59ae1e788fabee4ffa578",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T19:00:03+00:00",
        "timestamp": "1780167603",
        "to_ids": true,
        "type": "domain",
        "uuid": "12f48d7f-f271-4b53-8ac0-184b94e0c7f9",
        "value": "nycaihong.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T19:00:03+00:00",
        "timestamp": "1780167603",
        "to_ids": false,
        "type": "url",
        "uuid": "3e212cdf-9d95-4bad-a64b-2916cb09d876",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/2b80e8d739b0ce70cde341e49b56469de1bb5052",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T19:00:03+00:00",
        "timestamp": "1780167603",
        "to_ids": false,
        "type": "url",
        "uuid": "4aeeb151-a441-4836-9011-12ae59038a37",
        "value": "https://www.malware-traffic-analysis.net/2026/05/11/index.html",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T19:00:03+00:00",
        "timestamp": "1780167603",
        "to_ids": true,
        "type": "domain",
        "uuid": "16dd987d-19c2-49a2-8ed2-03e391e8d194",
        "value": "alragaa.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T19:00:03+00:00",
        "timestamp": "1780167603",
        "to_ids": true,
        "type": "domain",
        "uuid": "29b3d412-d8b8-44ae-ba0d-54f486a54807",
        "value": "culturabia.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T19:00:03+00:00",
        "timestamp": "1780167604",
        "to_ids": true,
        "type": "domain",
        "uuid": "dab64bfb-7bc2-47cb-9542-a3f20c052afd",
        "value": "dedelk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T19:00:04+00:00",
        "timestamp": "1780167604",
        "to_ids": true,
        "type": "domain",
        "uuid": "61e61726-106d-4046-aadf-c79227ec7b1c",
        "value": "rapid-craft567.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T19:00:04+00:00",
        "timestamp": "1780167604",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d1be887-01d8-4f63-9ac2-6fc757d7a6b0",
        "value": "suzke.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T21:00:02+00:00",
        "timestamp": "1780174802",
        "to_ids": false,
        "type": "url",
        "uuid": "03e47c9e-8055-4fd2-8712-c9d0b02b857a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/2f8b0d71682c199ceaee6484237adc9a89096702",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T21:00:02+00:00",
        "timestamp": "1780174802",
        "to_ids": true,
        "type": "domain",
        "uuid": "15432d89-23dc-4918-b40d-ad0f5b9db606",
        "value": "bedpocket.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T21:00:02+00:00",
        "timestamp": "1780174802",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6021802-0244-448d-9a0c-7865b8456fb8",
        "value": "chinoatmeal.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T21:00:02+00:00",
        "timestamp": "1780174803",
        "to_ids": true,
        "type": "domain",
        "uuid": "df7cfd85-0f1a-4302-bf1f-b8416f8210f9",
        "value": "eggsjelly.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T21:00:03+00:00",
        "timestamp": "1780174803",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c5a574b-88c5-4e08-ac33-68e649faa229",
        "value": "stringcard.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T21:00:03+00:00",
        "timestamp": "1780174803",
        "to_ids": true,
        "type": "domain",
        "uuid": "739ec891-de56-4a45-830d-449e4c68ee90",
        "value": "temperbed.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T22:00:02+00:00",
        "timestamp": "1780178404",
        "to_ids": false,
        "type": "url",
        "uuid": "8697e1d6-0f50-4ff3-9c7f-db2a73d018e9",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/7a9123c64cdc9905d32274c6ea5ba22c4d2c9049",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-30T22:00:04+00:00",
        "timestamp": "1780178405",
        "to_ids": true,
        "type": "domain",
        "uuid": "dafbebb6-532f-4f90-afef-c2fa3371f68e",
        "value": "applicationdev.eastus2.cloudapp.azure.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}